Comment by bzxcvbn

NTFS ACLs are much more powerful than Unix permissions. Just map users to users, groups to groups, and you're done.